Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
File: 4rHi5MUIxsepi2WYUodFyBP60x0.mft (raw, json)
Hash identifier: Mmz0JD3ef3kZNKkCMRMeK8FIXftMGS4nknbDbtfPaJs=
Subject key identifier: B7:2B:44:78:94:3C:7F:E4:F1:B1:BF:16:4F:7E:FD:55:1A:B6:34:F0
Authority key identifier: E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
Certificate issuer: /CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Certificate serial: 01A0CF6CDA3EA19DE0690BF7AC2335E94240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
Manifest number: 1A71
Signing time: Wed 23 Sep 2026 18:00:12 +0000
Manifest this update: Wed 23 Sep 2026 18:00:12 +0000
Manifest next update: Thu 24 Sep 2026 18:00:12 +0000
Files and hashes: 1: 4rHi5MUIxsepi2WYUodFyBP60x0.crl (hash: Ez2giF8Sm63fX1m97HxUp5v0FGHK6Jahl+vazlph7J8=)
2: FtpP7jqiRqsaewteqUCm2wyEXLM.roa (hash: MK0f39W8byL9gsiBPX02BzYZlhRpLBc93Ceao7rPOjg=)
3: a7W4vQeQw0IYd5G5T60uWMaPKGs.roa (hash: tRWFQQI0YZC0M7nzgTovhHQ6mNNC+raBd4UmVBuNPyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6c:da:3e:a1:9d:e0:69:0b:f7:ac:23:35:e9:42:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Validity
Not Before: Sep 23 18:00:12 2026 GMT
Not After : Sep 24 18:00:12 2026 GMT
Subject: CN=b72b4478943c7fe4f1b1bf164f7efd551ab634f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b6:cc:6b:02:71:6c:de:6c:d0:e0:f5:95:8f:
85:6a:d9:e6:25:3e:f3:98:76:9c:d0:f5:0c:de:a5:
0d:98:fb:ab:dd:40:25:7f:0e:29:85:52:23:35:c0:
d2:74:8f:30:20:79:44:24:0e:ae:03:17:37:3c:40:
38:4e:9b:26:d8:b7:4f:e3:2f:db:ca:3c:75:c5:bc:
f9:c8:50:8a:5e:be:13:a4:14:d3:85:e8:2c:2c:0b:
cb:e4:36:ec:d8:c5:05:3b:96:f6:20:1e:0c:09:e2:
a5:6a:6e:76:60:87:1e:dc:a7:9e:8d:ee:e4:5b:7f:
92:e9:d7:63:d5:1a:af:bc:27:13:93:2f:25:97:bc:
94:b9:5d:4c:a8:1c:11:14:81:58:b7:5b:9b:67:80:
73:cf:e4:a9:c6:fe:e8:26:f7:0d:d4:85:44:56:57:
3c:db:46:c0:b5:fb:29:21:83:35:05:8f:e7:a6:fa:
a2:8b:cb:b6:7c:fc:b3:d9:6c:78:80:66:e6:12:55:
a2:90:23:6a:67:d3:c0:6f:bf:66:24:5c:01:4a:cb:
54:3e:9f:c2:ce:5a:8a:b0:06:d5:3f:a0:bb:dc:75:
e0:88:76:8e:6a:f2:7d:cb:57:56:4e:c9:1b:f1:85:
4e:5e:d7:f6:ca:6a:98:20:a2:86:0a:30:52:ae:f8:
1f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2B:44:78:94:3C:7F:E4:F1:B1:BF:16:4F:7E:FD:55:1A:B6:34:F0
X509v3 Authority Key Identifier:
keyid:E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:68:9f:e0:c0:96:a3:69:5c:e2:39:93:a0:07:37:c4:77:a1:
19:70:4c:e7:b6:9b:8b:41:ea:6e:4b:e1:b0:94:02:91:f7:4c:
fe:d6:09:9a:18:0c:69:eb:63:86:b6:da:ab:61:3a:b6:3b:68:
dc:3e:77:cf:e1:6f:39:ab:d9:aa:b7:22:77:c1:8f:00:ba:1b:
e5:5f:0c:7f:10:da:9a:44:c8:66:d7:cd:d5:2d:14:64:48:e6:
73:cb:74:e7:a0:b3:55:1d:8f:87:6a:cb:35:e0:a3:95:94:cd:
fa:e2:66:df:fb:c8:ab:62:9f:35:65:bc:c3:ac:01:fa:80:ca:
2e:57:d9:62:b7:fe:d0:42:3e:ec:eb:92:1c:dc:24:54:4c:b3:
e4:72:6d:18:68:80:ec:09:5a:52:65:6d:b4:15:7c:23:31:69:
cc:d5:91:ef:5e:2f:52:65:a6:0a:b1:54:f4:48:86:61:a7:5a:
85:ac:45:67:df:42:54:fc:4e:69:72:c3:a5:22:c6:27:67:75:
e4:1a:28:be:bb:98:d6:4b:1e:be:f4:88:de:ec:0e:b7:b8:33:
90:01:2f:78:ee:83:92:3b:5c:4a:26:b1:3b:eb:0f:23:55:03:
78:6b:e5:03:3b:09:81:c2:38:99:37:fa:8f:c7:37:e5:97:73:
41:27:97:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:34:39 2026 by rpki-client